Alternatives and similar repositories for python-ssvc

Users that are interested in python-ssvc are comparing it to the libraries listed below

• theparanoids / PrioritizedRiskRemediation
  A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
  ☆82Updated last year
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆215Updated this week
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆168Updated last week
• anchore / nvd-data-overrides
  ☆48Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆177Updated last month
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆139Updated last year
• OWASP / OpenCRE
  ☆137Updated last week
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆434Updated this week
• xvnpw / ai-security-analyzer
  A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects
  ☆99Updated 3 months ago
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆97Updated this week
• javixeneize / neo4cyclone
  ☆25Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆292Updated this week
• aibom-squad / SBOM-for-AI-Use-Cases
  Repository for on-going work as part of the SBOM for AI Tiger Team effort.
  ☆40Updated 5 months ago
• anchore / vulnerability-data-tools
  ☆15Updated this week
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆124Updated 2 weeks ago
• ksthk / one
  One Conference 2024
  ☆111Updated last year
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆22Updated 2 years ago
• owaspsamm / core
  Core model including reused documentation
  ☆101Updated last month
• arnepadmos / threats
  An extensive list of resources related to threat modelling. Gotta catch ’em all!
  ☆40Updated last month
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆153Updated 9 months ago
• OWASP / www-project-threat-model-library
  OWASP Foundation web repository
  ☆34Updated last week
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆68Updated 6 months ago
• jgamblin / monthlyCVEStats
  Monthly CVE Stats
  ☆43Updated 2 weeks ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆110Updated 2 years ago
• ossf / ai-ml-security
  Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
  ☆141Updated last month
• mikeprivette / ai-security-shared-responsibility
  AI Security Shared Responsibility Model
  ☆88Updated 3 months ago
• Deploying-Securely / DSRAM
  ☆16Updated 2 years ago
• oasis-tcs / csaf
  OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…
  ☆204Updated last week
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆206Updated 3 months ago
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆97Updated 11 months ago